Jenkins
6 Jenkins flaws are on CISA's list of vulnerabilities attackers have used, 0 of them added in 2026. CISA says 1 is known to be used by ransomware. The latest was added Oct 2, 2025.
6on CISA's list, all time
0added in 2026
0in the last 90 days
1used by ransomware
0zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| Jenkins | 1 | Oct 2, 2025 |
| Jenkins Command Line Interface (CLI) | 1 | Aug 19, 2024 |
| Jenkins User Interface (UI) | 1 | May 12, 2023 |
| Script Security Plugin | 1 | Apr 25, 2022 |
| Matrix Project Plugin | 1 | Mar 25, 2022 |
| Jenkins Stapler Web Framework | 1 | Feb 10, 2022 |
Latest Jenkins flaws
- JenkinsJenkins Remote Code Execution Vulnerability
- Jenkins Command Line Interface (CLI)Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
- Jenkins User Interface (UI)Jenkins User Interface (UI) Information Disclosure Vulnerability
- Script Security PluginJenkins Script Security Plugin Sandbox Bypass Vulnerability
- Matrix Project PluginJenkins Matrix Project Plugin Remote Code Execution Vulnerability
- Jenkins Stapler Web FrameworkJenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.